On May 3, 2018, the Nuclear Regulatory Commission issued a Notice of Violation and Proposed Imposition of Civil Penalty in the amount of $8,500 to Idaho State University (licensee) for two Severity Level III violations of (1) 10 CFR 74.13 and (2) 10 CFR 20.1801 with 20.1802. Specifically, from 2004 until 2017, the licensee failed to secure from unauthorized removal or access the material stored in a controlled or unrestricted area that resulted in the licensee reporting to the NRC that it could not locate a sealed source of licensed material. Further, from November 2004 until March 2017, the licensee failed to provide the NRC with complete and accurate information in all material respects by including the lost source on its report to the NRC as being in the licensee's possession.